CISA added PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to its KEV catalog after honeypots logged 35 working shells, with a DPRK-linked
Microsoft shipped out-of-band .NET fixes and Palo Alto confirmed PAN-OS exposure to Brotli flaw CVE-2026-111497, as Wiz finds 91% of
Wiz Research says the Gheist campaign used stolen GitHub tokens to pull CI secrets from 850+ accounts, hitting private repos
UNM Health System diverted ambulances and canceled clinic visits on Monday after a cybersecurity incident, leaving New Mexico without a
Erica Windisch’s Tailworm report details 11 unpatched Tailscale and Headscale flaws, including a root path over Tailscale SSH. Tailscale says
Apple released iOS and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day, about a month after CISA added the
HashiCorp fixed CVE-2026-110720, a CVSS 9.9 authorization flaw in consul-k8s that lets low-privileged users gain elevated Consul privileges across namespaces.
Rapid7 reportedly disclosed 17 Zimbra Collaboration Suite flaws, from cross-site scripting to sudo-based root escalation, with patch releases now available.
Sansec says an unknown actor infected 953 online stores, mostly Magento, since July 2025 using five loader domains and a
Seoul police identified seven suspects who used the ARTEX AI framework to breach 90+ South Korean organizations and steal 8.2
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.